kata-new-project

SUSPICIOUS. The skill’s core behavior mostly matches project initialization, but its footprint is broader than simple planning: mandatory command execution, auto-commits, optional repo creation/push, local-script execution of unseen code, and CI scaffolding with unpinned/outdated actions. No clear credential theft or malicious exfiltration is present, but the automation and supply-chain trust surface make it medium risk.

The fragment appears to implement a legitimate Git worktree layout migration rather than malware. It contains no visible exfiltration or persistence behavior, but its broad recursive deletion of all non-allowlisted root files is highly destructive and should be treated as a security and data-loss risk. The unseen `kata-lib.cjs` utility and preceding setup logic require separate review before execution.